Getting An Agent's Certificate From A Public Ca; Getting An Agent's Certificate From Certificate System - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Getting an Agent's Certificate from a Public CA

The following general guidelines explain how a user can get a client certificate from a
public CA and how you can copy that certificate (in base-64 encoded form) to the internal
database of the appropriate subsystem:
Have the user send a client certificate request to a public CA from the computer they
1.
will use to access the subsystem from the Agent Services interface. It is important that
they generate and submit this request from the computer they will use later to access
the subsystem, because part of this request process generates a private key on the local
machine. Alternatively, if location independence is required, they can use a hardware
token, such as a smart card, to generate and store the key pair (and the certificate when
they receive it from the public CA).
When they receive the certificate from the public CA, have them import the certificate
2.
into the web browser used to access the subsystem. It is a good idea to ask the user to
inform you that the certificate has been installed.
Ask the user to send you the certificate information sent by the public CA. In the
3.
information that you receive, locate the user's certificate in base-64 encoded form.
You can also get the user's certificate from the public CA that issued it. Access the
public CA site, search for the user's certificate, and locate the certificate in base-64
encoded form.
Copy the base-64 encoded certificate, including the
4.
CERTIFICATE-----
Save the text file and use it to store a copy of the certificate in a subsystem's internal
5.
database. See "Setting up Administrators, Agents, and Auditors," on page 318
Getting an Agent's Certificate from Certificate
System
The following general instructions explain how a user can get a client certificate from CS
and how you can copy that certificate (in base-64 encoded form) to the internal database of
a subsystem:
and
-----END CERTIFICATE-----
Agent Certificates
-----BEGIN
marker lines, to a text file.
Chapter 9 Authorization 327